$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215274.roa File: AS215274.roa (raw, json) Hash identifier: IwDnkU7NiXfSTjySSrmk7UvJpDIMVYHuMd/aCEXzCuA= Subject key identifier: 11:BE:05:31:4B:9E:D0:61:23:47:40:B2:BD:E2:C4:5A:0D:C7:1C:BE Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 1CF9BAB773D462EC3FF2CFD300D9FC126783B23F Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215274.roa Signing time: Thu 29 Aug 2024 03:41:14 +0000 ROA not before: Thu 29 Aug 2024 03:36:14 +0000 ROA not after: Thu 28 Aug 2025 03:41:14 +0000 asID: 215274 IP address blocks: 2a0a:6044:a600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f9:ba:b7:73:d4:62:ec:3f:f2:cf:d3:00:d9:fc:12:67:83:b2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:14 2024 GMT Not After : Aug 28 03:41:14 2025 GMT Subject: CN=11BE05314B9ED061234740B2BDE2C45A0DC71CBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:44:8f:9a:ca:aa:68:44:7d:51:77:12:29: 45:24:b7:06:b6:4a:47:60:fc:00:5c:30:b2:ad:7e: f1:76:fa:25:41:f8:4b:27:53:08:32:8d:22:12:81: 25:1f:04:a3:4c:82:c8:29:97:bf:9a:c9:ad:89:c9: 14:f7:83:e5:e2:e7:fc:e9:9c:4c:9b:a1:1c:04:97: 9f:86:bf:ee:bf:66:69:40:2f:f2:71:34:80:2a:77: c1:ca:48:f5:6b:e1:77:be:ca:52:2e:07:f6:58:d6: d8:6f:d0:85:6a:68:f6:c7:ad:98:eb:ee:af:0c:56: e3:68:d1:a1:57:48:1d:31:30:cc:0e:69:eb:fe:1f: 5a:ec:0d:86:26:ee:dd:66:60:b7:9a:fe:df:ca:79: 19:3d:f8:1b:b4:cb:2c:b9:49:58:06:e8:09:7f:08: d5:c2:af:d2:01:76:36:72:4a:cb:de:95:f5:e6:d4: 32:14:4c:c4:54:58:6f:30:f0:65:ee:f5:d9:b8:f9: e4:e2:ed:c1:48:a2:5f:96:95:0e:ff:5d:7b:5a:ef: 90:ac:e4:0b:2a:18:fc:f9:67:45:fd:d6:b5:41:12: 3c:81:ff:1c:e2:e6:2c:84:3a:55:05:5e:22:3f:f5: fb:7c:de:ec:79:9c:d9:b6:86:e6:64:9c:dc:13:a5: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BE:05:31:4B:9E:D0:61:23:47:40:B2:BD:E2:C4:5A:0D:C7:1C:BE X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215274.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a600::/40 Signature Algorithm: sha256WithRSAEncryption 8a:f9:a1:8f:66:5d:04:6d:e5:fc:4b:b4:51:83:74:dd:61:1a: 4d:7d:71:64:68:68:36:8f:5f:98:3b:49:86:a9:c6:df:a5:eb: e1:45:73:89:60:f7:c5:8e:e3:34:b5:ba:fc:5e:91:8b:3e:97: ba:82:00:31:bf:1f:c2:16:20:7b:bf:57:0e:10:4e:eb:cc:b0: f9:9a:11:88:d9:cb:95:da:c6:0c:a2:17:6e:2b:4d:9a:20:60: e7:35:79:dc:b2:21:bf:e5:96:10:a1:6e:e3:e6:4a:00:c5:5e: 7b:bc:98:59:cd:29:ee:05:9b:7f:dd:88:36:21:04:2c:ed:15: 34:98:f8:43:d8:50:7a:c5:17:20:3c:f3:06:fe:09:85:38:a0: 30:7e:4c:d1:5f:21:07:02:ca:42:fd:49:f1:7c:3d:e0:da:1b: 31:21:42:40:f1:6d:22:24:0f:71:22:eb:12:c6:bd:5c:a8:ca: be:ad:21:7a:b8:6b:1c:1e:45:6e:e1:44:c1:0f:c1:b7:0a:de: b1:9d:d0:3b:2f:0a:6d:b7:10:db:2d:03:14:ae:8c:07:ab:9e: 73:c0:33:b7:d2:88:60:34:4e:de:f8:08:5d:0e:aa:ef:cc:7c: 12:c1:12:dc:bd:cc:58:1d:f8:05:90:0c:cf:66:0d:e0:56:c3: 4d:22:25:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHPm6t3PUYuw/8s/TANn8EmeDsj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTRaFw0yNTA4MjgwMzQxMTRaMDMxMTAvBgNV BAMTKDExQkUwNTMxNEI5RUQwNjEyMzQ3NDBCMkJERTJDNDVBMERDNzFDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rESPmsqqaER9UXcSKUUktwa2 Skdg/ABcMLKtfvF2+iVB+EsnUwgyjSISgSUfBKNMgsgpl7+aya2JyRT3g+Xi5/zp nEyboRwEl5+Gv+6/ZmlAL/JxNIAqd8HKSPVr4Xe+ylIuB/ZY1thv0IVqaPbHrZjr 7q8MVuNo0aFXSB0xMMwOaev+H1rsDYYm7t1mYLea/t/KeRk9+Bu0yyy5SVgG6Al/ CNXCr9IBdjZySsvelfXm1DIUTMRUWG8w8GXu9dm4+eTi7cFIol+WlQ7/XXta75Cs 5AsqGPz5Z0X91rVBEjyB/xzi5iyEOlUFXiI/9ft83ux5nNm2huZknNwTpenTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEb4FMUue0GEjR0CyveLEWg3HHL4wHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE1Mjc0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg RKYwDQYJKoZIhvcNAQELBQADggEBAIr5oY9mXQRt5fxLtFGDdN1hGk19cWRoaDaP X5g7SYapxt+l6+FFc4lg98WO4zS1uvxekYs+l7qCADG/H8IWIHu/Vw4QTuvMsPma EYjZy5XaxgyiF24rTZogYOc1edyyIb/llhChbuPmSgDFXnu8mFnNKe4Fm3/diDYh BCztFTSY+EPYUHrFFyA88wb+CYU4oDB+TNFfIQcCykL9SfF8PeDaGzEhQkDxbSIk D3Ei6xLGvVyoyr6tIXq4axweRW7hRMEPwbcK3rGd0DsvCm23ENstAxSujAernnPA M7fSiGA0Tt74CF0Oqu/MfBLBEty9zFgd+AWQDM9mDeBWw00iJYs= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:43 2024 by rpki-client on console-ams.rpki-client.org